483566f2e821d00dace03e0deccf43f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

483566f2e821d00dace03e0deccf43f9_JaffaCakes118
Size

128KB
MD5

483566f2e821d00dace03e0deccf43f9
SHA1

51b33fe71cf4c19c44fd5ecde694525388264d02
SHA256

8862337df572f6314246e19781e48561c0323f71192196d778f3700dd961a900
SHA512

ce3d391bf1b0bd520efac984fd6ddf6b65f1ef192c10b5e57453477bea0099594d0b60b78eac6cfc33b188f9ac4e704baea34ef7fd2091713eb13c18dab065b9
SSDEEP

3072:xml9Wu+ttt7EyR5lN5ZRhcpav2Yr+pkIE1FA1YD:CWu+nhEolbwav2Yr+c1FA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483566f2e821d00dace03e0deccf43f9_JaffaCakes118

Files

483566f2e821d00dace03e0deccf43f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e975d7193f89cbebce9e1238627595f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

na_util

?InitDriverName@@YAXPBD@Z
?PrintWindowsError@@YAXHPAD@Z
?PrintWindowsError@@YAXPAD@Z
?PrintErrnoError@@YAXPAD@Z
?PrintWinsockError@@YAXHPAD@Z
?PrintWinsockError@@YAXPAD@Z
?PrintError@@YAXPAD@Z

kernel32

SetEnvironmentVariableA
GetComputerNameA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
InterlockedIncrement
InterlockedDecrement
Sleep
LeaveCriticalSection
EnterCriticalSection
TerminateThread
WaitForSingleObject
CreateEventA
ExitProcess
GetCommandLineA
SetCurrentDirectoryA
GetModuleFileNameA
RaiseException
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetVersion
FatalAppExitA
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
CompareStringW
SetStdHandle
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
LoadLibraryA

user32

ShowWindow
CreateWindowExA
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxA
UpdateWindow
LoadIconA
RegisterClassExA
PostQuitMessage
DefWindowProcA
PostMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegCloseKey

wsock32

ntohs
__WSAFDIsSet
send
recv
gethostbyname
WSAGetLastError
shutdown
gethostbyaddr
htons
bind
listen
inet_ntoa
WSAStartup
ioctlsocket
select
inet_addr
socket
closesocket
WSACleanup
accept

wnetway2

_net_open@8
_net_receiveAsync@4
_net_ioctl@16
_net_sendAsync@4
_net_waitAsync@4
_net_detach@8
_net_flush@12
_net_attach@12
_net_localinfo@8
_net_close@8

wdtgr2

_dtgr5_extract@16
_dtgr5_build@20
_dtgr5_init_def_adr@4
_dtgr5_init_srce_adr@8

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qzdwghb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e975d7193f89cbebce9e1238627595f1

Headers

File Characteristics

Imports

na_util

kernel32

user32

advapi32

wsock32

wnetway2

wdtgr2

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 20KB - Virtual size: 23KB

.rsrc Size: 40KB - Virtual size: 40KB

qzdwghb Size: - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 20KB - Virtual size: 23KB

.rsrc
Size: 40KB - Virtual size: 40KB

qzdwghb
Size: - Virtual size: 4KB